Behavioral task
behavioral1
Sample
aaf00b53df385ee3e4a34e3712ec0636.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
aaf00b53df385ee3e4a34e3712ec0636.exe
Resource
win10v2004-20231215-en
General
-
Target
aaf00b53df385ee3e4a34e3712ec0636.exe
-
Size
29KB
-
MD5
aaf00b53df385ee3e4a34e3712ec0636
-
SHA1
f6e75b61bef2a1075eae83790dedb0dc41e26acf
-
SHA256
8be7871aecfc2e3039cefaeab9954a4ee7903ece4099bfa295936b030764f521
-
SHA512
b49ff6ff7f2045de7b938d6cf0b7777258559d209d43b5b8bf0743e224e163d91f40d9b10ae09d7e46dc0b9c00ad0636933c898ae84b0be42cd0fc8071edfb6e
-
SSDEEP
768:AJ9YS3WB+eetzo8ao3uqzAKxwGrdSEy5Z:09hWetzZuewmkZ
Malware Config
Extracted
njrat
0.7d
MyBot 2025
mznhr.ddns.net:4887
5d33060b656af2b9a3ae52904371dccf
-
reg_key
5d33060b656af2b9a3ae52904371dccf
-
splitter
Y262SUCZ4UJJ
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aaf00b53df385ee3e4a34e3712ec0636.exe
Files
-
aaf00b53df385ee3e4a34e3712ec0636.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 575B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ